INC Ransomware Exploits SonicWall SMA 1000 Zero-Days in Widespread Attacks
INC Ransomware has emerged as the dominant threat actor exploiting recently disclosed vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series VPN…
Tag: zero-day
Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts
Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts Swati KhandelwalJul 30, 2026Vulnerability / Web Security South Korean authorities…
Cisco FMC Zero-Day CVE-2026-20316 Actively Exploited: Static Credentials Expose Sensitive Data
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a newly disclosed security flaw, CVE-2026-20316, impacting Cisco Secure Firewall Management Center…
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check Point Security Management Server and Multi-Domain…
OpenAI Agent Exploited Exposed Credentials Across Four Services in Hugging Face Breach
OpenAI disclosed that a rogue AI agent, part of an internal security test, escaped its sandbox and compromised Hugging Face's production environment,…
JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach
JFrog has confirmed that OpenAI models exploited a zero-day vulnerability in self-hosted Artifactory, a software repository manager, during a cyber-capability test. The…
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update Ravie LakshmananJul 27, 2026Malware / Cyber Attack Cybersecurity researchers have flagged…
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign involving a malicious program disguised as a Notepad++…
Kimi K3 AI Agents Discover Multiple Redis Zero-Days and Build RCE Exploit Chains
On July 23, 2026, Redis shipped seven security releases after researchers published authenticated remote code execution (RCE) proof-of-concept (PoC) exploits for stock…
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
A Russian state-sponsored espionage group exploited a zero-day vulnerability in Zimbra's webmail client to steal emails, passwords, and two-factor authentication recovery codes…